?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
fix failure of gotwebd action_patch test on single-digit days of the month
[got-portable.git] / gotd / repo_write.c
blobe29b7533a3f9e035da1638280021d5a622d69430
1 /*
2 * Copyright (c) 2022 Stefan Sperling <stsp@openbsd.org>
3 *
4 * Permission to use, copy, modify, and distribute this software for any
5 * purpose with or without fee is hereby granted, provided that the above
6 * copyright notice and this permission notice appear in all copies.
7 *
8 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15 */
16
17 #include "got_compat.h"
18
19 #include <sys/queue.h>
20 #include <sys/stat.h>
21 #include <sys/types.h>
22
23 #include <ctype.h>
24 #include <event.h>
25 #include <errno.h>
26 #include <imsg.h>
27 #include <signal.h>
28 #include <stdio.h>
29 #include <stdlib.h>
30 #include <string.h>
31 #include <limits.h>
32 #include <poll.h>
33 #include <unistd.h>
34 #include <zlib.h>
35
36 #include "buf.h"
37
38 #include "got_error.h"
39 #include "got_repository.h"
40 #include "got_object.h"
41 #include "got_reference.h"
42 #include "got_path.h"
43 #include "got_diff.h"
44 #include "got_cancel.h"
45 #include "got_commit_graph.h"
46 #include "got_opentemp.h"
47
48 #include "got_lib_delta.h"
49 #include "got_lib_delta_cache.h"
50 #include "got_lib_hash.h"
51 #include "got_lib_object.h"
52 #include "got_lib_object_cache.h"
53 #include "got_lib_object_idset.h"
54 #include "got_lib_object_parse.h"
55 #include "got_lib_ratelimit.h"
56 #include "got_lib_pack.h"
57 #include "got_lib_pack_index.h"
58 #include "got_lib_repository.h"
59 #include "got_lib_poll.h"
60
61 #include "log.h"
62 #include "gotd.h"
63 #include "repo_write.h"
64
65 #ifndef nitems
66 #define nitems(_a) (sizeof((_a)) / sizeof((_a)[0]))
67 #endif
68
69 static struct repo_write {
70 pid_t pid;
71 const char *title;
72 struct got_repository *repo;
73 int *pack_fds;
74 int *temp_fds;
75 int session_fd;
76 struct gotd_imsgev session_iev;
77 struct got_pathlist_head *protected_tag_namespaces;
78 struct got_pathlist_head *protected_branch_namespaces;
79 struct got_pathlist_head *protected_branches;
80 struct {
81 FILE *f1;
82 FILE *f2;
83 int fd1;
84 int fd2;
85 } diff;
86 int refs_listed;
87 } repo_write;
88
89 struct gotd_ref_update {
90 STAILQ_ENTRY(gotd_ref_update) entry;
91 struct got_reference *ref;
92 int ref_is_new;
93 int delete_ref;
94 struct got_object_id old_id;
95 struct got_object_id new_id;
96 };
97 STAILQ_HEAD(gotd_ref_updates, gotd_ref_update);
98
99 static struct repo_write_client {
100 uint32_t id;
101 int fd;
102 int pack_pipe;
103 struct got_pack pack;
104 uint8_t pack_sha1[SHA1_DIGEST_LENGTH];
105 int packidx_fd;
106 struct gotd_ref_updates ref_updates;
107 int nref_updates;
108 int nref_del;
109 int nref_new;
110 int nref_move;
111 } repo_write_client;
112
113 static volatile sig_atomic_t sigint_received;
114 static volatile sig_atomic_t sigterm_received;
115
116 static void
117 catch_sigint(int signo)
118 {
119 sigint_received = 1;
120 }
121
122 static void
123 catch_sigterm(int signo)
124 {
125 sigterm_received = 1;
126 }
127
128 static const struct got_error *
129 check_cancelled(void *arg)
130 {
131 if (sigint_received || sigterm_received)
132 return got_error(GOT_ERR_CANCELLED);
133
134 return NULL;
135 }
136
137 static const struct got_error *
138 send_peeled_tag_ref(struct got_reference *ref, struct got_object *obj,
139 struct imsgbuf *ibuf)
140 {
141 const struct got_error *err = NULL;
142 struct got_tag_object *tag;
143 size_t namelen, len;
144 char *peeled_refname = NULL;
145 struct got_object_id *id;
146 struct ibuf *wbuf;
147
148 err = got_object_tag_open(&tag, repo_write.repo, obj);
149 if (err)
150 return err;
151
152 if (asprintf(&peeled_refname, "%s^{}", got_ref_get_name(ref)) == -1) {
153 err = got_error_from_errno("asprintf");
154 goto done;
155 }
156
157 id = got_object_tag_get_object_id(tag);
158 namelen = strlen(peeled_refname);
159
160 len = sizeof(struct gotd_imsg_ref) + namelen;
161 if (len > MAX_IMSGSIZE - IMSG_HEADER_SIZE) {
162 err = got_error(GOT_ERR_NO_SPACE);
163 goto done;
164 }
165
166 wbuf = imsg_create(ibuf, GOTD_IMSG_REF, PROC_REPO_WRITE,
167 repo_write.pid, len);
168 if (wbuf == NULL) {
169 err = got_error_from_errno("imsg_create REF");
170 goto done;
171 }
172
173 /* Keep in sync with struct gotd_imsg_ref definition. */
174 if (imsg_add(wbuf, id->hash, SHA1_DIGEST_LENGTH) == -1) {
175 err = got_error_from_errno("imsg_add REF");
176 goto done;
177 }
178 if (imsg_add(wbuf, &namelen, sizeof(namelen)) == -1) {
179 err = got_error_from_errno("imsg_add REF");
180 goto done;
181 }
182 if (imsg_add(wbuf, peeled_refname, namelen) == -1) {
183 err = got_error_from_errno("imsg_add REF");
184 goto done;
185 }
186
187 imsg_close(ibuf, wbuf);
188 done:
189 got_object_tag_close(tag);
190 return err;
191 }
192
193 static const struct got_error *
194 send_ref(struct got_reference *ref, struct imsgbuf *ibuf)
195 {
196 const struct got_error *err;
197 const char *refname = got_ref_get_name(ref);
198 size_t namelen;
199 struct got_object_id *id = NULL;
200 struct got_object *obj = NULL;
201 size_t len;
202 struct ibuf *wbuf;
203
204 namelen = strlen(refname);
205
206 len = sizeof(struct gotd_imsg_ref) + namelen;
207 if (len > MAX_IMSGSIZE - IMSG_HEADER_SIZE)
208 return got_error(GOT_ERR_NO_SPACE);
209
210 err = got_ref_resolve(&id, repo_write.repo, ref);
211 if (err)
212 return err;
213
214 wbuf = imsg_create(ibuf, GOTD_IMSG_REF, PROC_REPO_WRITE,
215 repo_write.pid, len);
216 if (wbuf == NULL) {
217 err = got_error_from_errno("imsg_create REF");
218 goto done;
219 }
220
221 /* Keep in sync with struct gotd_imsg_ref definition. */
222 if (imsg_add(wbuf, id->hash, SHA1_DIGEST_LENGTH) == -1)
223 return got_error_from_errno("imsg_add REF");
224 if (imsg_add(wbuf, &namelen, sizeof(namelen)) == -1)
225 return got_error_from_errno("imsg_add REF");
226 if (imsg_add(wbuf, refname, namelen) == -1)
227 return got_error_from_errno("imsg_add REF");
228
229 imsg_close(ibuf, wbuf);
230
231 err = got_object_open(&obj, repo_write.repo, id);
232 if (err)
233 goto done;
234 if (obj->type == GOT_OBJ_TYPE_TAG)
235 err = send_peeled_tag_ref(ref, obj, ibuf);
236 done:
237 if (obj)
238 got_object_close(obj);
239 free(id);
240 return err;
241 }
242
243 static const struct got_error *
244 list_refs(struct imsg *imsg)
245 {
246 const struct got_error *err;
247 struct repo_write_client *client = &repo_write_client;
248 struct got_reflist_head refs;
249 struct got_reflist_entry *re;
250 size_t datalen;
251 struct gotd_imsg_reflist irefs;
252 struct imsgbuf ibuf;
253
254 TAILQ_INIT(&refs);
255
256 datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
257 if (datalen != 0)
258 return got_error(GOT_ERR_PRIVSEP_LEN);
259
260 if (repo_write.refs_listed) {
261 return got_error_msg(GOT_ERR_CLIENT_ID,
262 "duplicate list-refs request");
263 }
264 repo_write.refs_listed = 1;
265
266 client->fd = imsg_get_fd(imsg);
267 if (client->fd == -1)
268 return got_error(GOT_ERR_PRIVSEP_NO_FD);
269
270 client->nref_updates = 0;
271 client->nref_del = 0;
272 client->nref_new = 0;
273 client->nref_move = 0;
274
275 if (imsgbuf_init(&ibuf, client->fd) == -1)
276 return got_error_from_errno("imsgbuf_init");
277 imsgbuf_allow_fdpass(&ibuf);
278
279 err = got_ref_list(&refs, repo_write.repo, "",
280 got_ref_cmp_by_name, NULL);
281 if (err)
282 return err;
283
284 memset(&irefs, 0, sizeof(irefs));
285 TAILQ_FOREACH(re, &refs, entry) {
286 struct got_object_id *id;
287 int obj_type;
288
289 if (got_ref_is_symbolic(re->ref))
290 continue;
291
292 irefs.nrefs++;
293
294 /* Account for a peeled tag refs. */
295 err = got_ref_resolve(&id, repo_write.repo, re->ref);
296 if (err)
297 goto done;
298 err = got_object_get_type(&obj_type, repo_write.repo, id);
299 free(id);
300 if (err)
301 goto done;
302 if (obj_type == GOT_OBJ_TYPE_TAG)
303 irefs.nrefs++;
304 }
305
306 if (imsg_compose(&ibuf, GOTD_IMSG_REFLIST, PROC_REPO_WRITE,
307 repo_write.pid, -1, &irefs, sizeof(irefs)) == -1) {
308 err = got_error_from_errno("imsg_compose REFLIST");
309 goto done;
310 }
311
312 TAILQ_FOREACH(re, &refs, entry) {
313 if (got_ref_is_symbolic(re->ref))
314 continue;
315 err = send_ref(re->ref, &ibuf);
316 if (err)
317 goto done;
318 }
319
320 err = gotd_imsg_flush(&ibuf);
321 done:
322 got_ref_list_free(&refs);
323 imsgbuf_clear(&ibuf);
324 return err;
325 }
326
327 static const struct got_error *
328 validate_namespace(const char *namespace)
329 {
330 size_t len = strlen(namespace);
331
332 if (len < 5 || strncmp("refs/", namespace, 5) != 0 ||
333 namespace[len -1] != '/') {
334 return got_error_fmt(GOT_ERR_BAD_REF_NAME,
335 "reference namespace '%s'", namespace);
336 }
337
338 return NULL;
339 }
340
341 static const struct got_error *
342 protect_ref_namespace(const char *refname, const char *namespace)
343 {
344 const struct got_error *err;
345
346 err = validate_namespace(namespace);
347 if (err)
348 return err;
349
350 if (strncmp(namespace, refname, strlen(namespace)) == 0)
351 return got_error_fmt(GOT_ERR_REFS_PROTECTED, "%s", namespace);
352
353 return NULL;
354 }
355
356 static const struct got_error *
357 verify_object_type(struct got_object_id *id, int expected_obj_type,
358 struct got_pack *pack, struct got_packidx *packidx)
359 {
360 const struct got_error *err;
361 char hex[SHA1_DIGEST_STRING_LENGTH];
362 struct got_object *obj;
363 int idx;
364 const char *typestr;
365
366 idx = got_packidx_get_object_idx(packidx, id);
367 if (idx == -1) {
368 got_object_id_hex(id, hex, sizeof(hex));
369 return got_error_fmt(GOT_ERR_BAD_PACKFILE,
370 "object %s is missing from pack file", hex);
371 }
372
373 err = got_object_open_from_packfile(&obj, id, pack, packidx,
374 idx, repo_write.repo);
375 if (err)
376 return err;
377
378 if (obj->type != expected_obj_type) {
379 got_object_id_hex(id, hex, sizeof(hex));
380 got_object_type_label(&typestr, expected_obj_type);
381 err = got_error_fmt(GOT_ERR_OBJ_TYPE,
382 "%s is not pointing at a %s object", hex, typestr);
383 }
384 got_object_close(obj);
385 return err;
386 }
387
388 static const struct got_error *
389 protect_tag_namespace(const char *namespace, struct got_pack *pack,
390 struct got_packidx *packidx, struct gotd_ref_update *ref_update)
391 {
392 const struct got_error *err;
393
394 err = validate_namespace(namespace);
395 if (err)
396 return err;
397
398 if (strncmp(namespace, got_ref_get_name(ref_update->ref),
399 strlen(namespace)) != 0)
400 return NULL;
401
402 if (!ref_update->ref_is_new)
403 return got_error_fmt(GOT_ERR_REFS_PROTECTED, "%s", namespace);
404
405 return verify_object_type(&ref_update->new_id, GOT_OBJ_TYPE_TAG,
406 pack, packidx);
407 }
408
409 static const struct got_error *
410 protect_require_yca(struct got_object_id *tip_id,
411 size_t max_commits_to_traverse, struct got_pack *pack,
412 struct got_packidx *packidx, struct got_reference *ref)
413 {
414 const struct got_error *err;
415 uint8_t *buf = NULL;
416 size_t len;
417 struct got_object_id *expected_yca_id = NULL;
418 struct got_object *obj = NULL;
419 struct got_commit_object *commit = NULL;
420 char hex[SHA1_DIGEST_STRING_LENGTH];
421 const struct got_object_id_queue *parent_ids;
422 struct got_object_id_queue ids;
423 struct got_object_qid *pid, *qid;
424 struct got_object_idset *traversed_set = NULL;
425 int found_yca = 0, obj_type;
426
427 STAILQ_INIT(&ids);
428
429 err = got_ref_resolve(&expected_yca_id, repo_write.repo, ref);
430 if (err)
431 return err;
432
433 err = got_object_get_type(&obj_type, repo_write.repo, expected_yca_id);
434 if (err)
435 goto done;
436
437 if (obj_type != GOT_OBJ_TYPE_COMMIT) {
438 got_object_id_hex(expected_yca_id, hex, sizeof(hex));
439 err = got_error_fmt(GOT_ERR_OBJ_TYPE,
440 "%s is not pointing at a commit object", hex);
441 goto done;
442 }
443
444 traversed_set = got_object_idset_alloc();
445 if (traversed_set == NULL) {
446 err = got_error_from_errno("got_object_idset_alloc");
447 goto done;
448 }
449
450 err = got_object_qid_alloc(&qid, tip_id);
451 if (err)
452 goto done;
453 STAILQ_INSERT_TAIL(&ids, qid, entry);
454 while (!STAILQ_EMPTY(&ids)) {
455 err = check_cancelled(NULL);
456 if (err)
457 break;
458
459 qid = STAILQ_FIRST(&ids);
460 if (got_object_id_cmp(&qid->id, expected_yca_id) == 0) {
461 found_yca = 1;
462 break;
463 }
464
465 if (got_object_idset_num_elements(traversed_set) >=
466 max_commits_to_traverse)
467 break;
468
469 if (got_object_idset_contains(traversed_set, &qid->id)) {
470 STAILQ_REMOVE_HEAD(&ids, entry);
471 got_object_qid_free(qid);
472 qid = NULL;
473 continue;
474 }
475 err = got_object_idset_add(traversed_set, &qid->id, NULL);
476 if (err)
477 goto done;
478
479 err = got_object_open(&obj, repo_write.repo, &qid->id);
480 if (err && err->code != GOT_ERR_NO_OBJ)
481 goto done;
482 err = NULL;
483 if (obj) {
484 err = got_object_commit_open(&commit, repo_write.repo,
485 obj);
486 if (err)
487 goto done;
488 } else {
489 int idx;
490
491 idx = got_packidx_get_object_idx(packidx, &qid->id);
492 if (idx == -1) {
493 got_object_id_hex(&qid->id, hex, sizeof(hex));
494 err = got_error_fmt(GOT_ERR_BAD_PACKFILE,
495 "object %s is missing from pack file", hex);
496 goto done;
497 }
498
499 err = got_object_open_from_packfile(&obj, &qid->id,
500 pack, packidx, idx, repo_write.repo);
501 if (err)
502 goto done;
503
504 if (obj->type != GOT_OBJ_TYPE_COMMIT) {
505 got_object_id_hex(&qid->id, hex, sizeof(hex));
506 err = got_error_fmt(GOT_ERR_OBJ_TYPE,
507 "%s is not pointing at a commit object",
508 hex);
509 goto done;
510 }
511
512 err = got_packfile_extract_object_to_mem(&buf, &len,
513 obj, pack);
514 if (err)
515 goto done;
516
517 err = got_object_parse_commit(&commit, buf, len,
518 GOT_HASH_SHA1);
519 if (err)
520 goto done;
521
522 free(buf);
523 buf = NULL;
524 }
525
526 got_object_close(obj);
527 obj = NULL;
528
529 STAILQ_REMOVE_HEAD(&ids, entry);
530 got_object_qid_free(qid);
531 qid = NULL;
532
533 if (got_object_commit_get_nparents(commit) == 0)
534 break;
535
536 parent_ids = got_object_commit_get_parent_ids(commit);
537 STAILQ_FOREACH(pid, parent_ids, entry) {
538 err = check_cancelled(NULL);
539 if (err)
540 goto done;
541 err = got_object_qid_alloc(&qid, &pid->id);
542 if (err)
543 goto done;
544 STAILQ_INSERT_TAIL(&ids, qid, entry);
545 qid = NULL;
546 }
547 got_object_commit_close(commit);
548 commit = NULL;
549 }
550
551 if (!found_yca) {
552 err = got_error_fmt(GOT_ERR_REF_PROTECTED, "%s",
553 got_ref_get_name(ref));
554 }
555 done:
556 got_object_idset_free(traversed_set);
557 got_object_id_queue_free(&ids);
558 free(buf);
559 if (obj)
560 got_object_close(obj);
561 if (commit)
562 got_object_commit_close(commit);
563 free(expected_yca_id);
564 return err;
565 }
566
567 static const struct got_error *
568 protect_branch_namespace(const char *namespace, struct got_pack *pack,
569 struct got_packidx *packidx, struct gotd_ref_update *ref_update)
570 {
571 const struct got_error *err;
572
573 err = validate_namespace(namespace);
574 if (err)
575 return err;
576
577 if (strncmp(namespace, got_ref_get_name(ref_update->ref),
578 strlen(namespace)) != 0)
579 return NULL;
580
581 if (ref_update->ref_is_new) {
582 return verify_object_type(&ref_update->new_id,
583 GOT_OBJ_TYPE_COMMIT, pack, packidx);
584 }
585
586 return protect_require_yca(&ref_update->new_id,
587 be32toh(packidx->hdr.fanout_table[0xff]), pack, packidx,
588 ref_update->ref);
589 }
590
591 static const struct got_error *
592 protect_branch(const char *refname, struct got_pack *pack,
593 struct got_packidx *packidx, struct gotd_ref_update *ref_update)
594 {
595 if (strcmp(refname, got_ref_get_name(ref_update->ref)) != 0)
596 return NULL;
597
598 /* Always allow new branches to be created. */
599 if (ref_update->ref_is_new) {
600 return verify_object_type(&ref_update->new_id,
601 GOT_OBJ_TYPE_COMMIT, pack, packidx);
602 }
603
604 return protect_require_yca(&ref_update->new_id,
605 be32toh(packidx->hdr.fanout_table[0xff]), pack, packidx,
606 ref_update->ref);
607 }
608
609 static const struct got_error *
610 recv_ref_update(struct imsg *imsg)
611 {
612 static const char zero_id[SHA1_DIGEST_LENGTH];
613 const struct got_error *err = NULL;
614 struct repo_write_client *client = &repo_write_client;
615 struct gotd_imsg_ref_update iref;
616 size_t datalen;
617 char *refname = NULL;
618 struct got_reference *ref = NULL;
619 struct got_object_id *id = NULL;
620 struct imsgbuf ibuf;
621 struct gotd_ref_update *ref_update = NULL;
622
623 log_debug("ref-update received");
624
625 datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
626 if (datalen < sizeof(iref))
627 return got_error(GOT_ERR_PRIVSEP_LEN);
628 memcpy(&iref, imsg->data, sizeof(iref));
629 if (datalen != sizeof(iref) + iref.name_len)
630 return got_error(GOT_ERR_PRIVSEP_LEN);
631
632 if (imsgbuf_init(&ibuf, client->fd))
633 return got_error_from_errno("imsgbuf_init");
634 imsgbuf_allow_fdpass(&ibuf);
635
636 refname = strndup(imsg->data + sizeof(iref), iref.name_len);
637 if (refname == NULL) {
638 err = got_error_from_errno("strndup");
639 goto done;
640 }
641
642 ref_update = calloc(1, sizeof(*ref_update));
643 if (ref_update == NULL) {
644 err = got_error_from_errno("malloc");
645 goto done;
646 }
647
648 memcpy(ref_update->old_id.hash, iref.old_id, SHA1_DIGEST_LENGTH);
649 memcpy(ref_update->new_id.hash, iref.new_id, SHA1_DIGEST_LENGTH);
650
651 err = got_ref_open(&ref, repo_write.repo, refname, 0);
652 if (err) {
653 if (err->code != GOT_ERR_NOT_REF)
654 goto done;
655 if (memcmp(ref_update->new_id.hash,
656 zero_id, sizeof(zero_id)) == 0) {
657 err = got_error_fmt(GOT_ERR_BAD_OBJ_ID,
658 "%s", refname);
659 goto done;
660 }
661 err = got_ref_alloc(&ref, refname, &ref_update->new_id);
662 if (err)
663 goto done;
664 ref_update->ref_is_new = 1;
665 client->nref_new++;
666 }
667 if (got_ref_is_symbolic(ref)) {
668 err = got_error_fmt(GOT_ERR_BAD_REF_TYPE,
669 "'%s' is a symbolic reference and cannot "
670 "be updated", got_ref_get_name(ref));
671 goto done;
672 }
673 if (strncmp("refs/", got_ref_get_name(ref), 5) != 0) {
674 err = got_error_fmt(GOT_ERR_BAD_REF_NAME,
675 "%s: does not begin with 'refs/'",
676 got_ref_get_name(ref));
677 goto done;
678 }
679
680 err = protect_ref_namespace(got_ref_get_name(ref), "refs/got/");
681 if (err)
682 goto done;
683 err = protect_ref_namespace(got_ref_get_name(ref), "refs/remotes/");
684 if (err)
685 goto done;
686
687 if (!ref_update->ref_is_new) {
688 /*
689 * Ensure the client's idea of this update is still valid.
690 * At this point we can only return an error, to prevent
691 * the client from uploading a pack file which will likely
692 * have to be discarded.
693 */
694 err = got_ref_resolve(&id, repo_write.repo, ref);
695 if (err)
696 goto done;
697
698 if (got_object_id_cmp(id, &ref_update->old_id) != 0) {
699 err = got_error_fmt(GOT_ERR_REF_BUSY,
700 "%s has been modified by someone else "
701 "while transaction was in progress",
702 got_ref_get_name(ref));
703 goto done;
704 }
705 }
706
707 gotd_imsg_send_ack(&ref_update->new_id, &ibuf, PROC_REPO_WRITE,
708 repo_write.pid);
709
710 ref_update->ref = ref;
711 if (memcmp(ref_update->new_id.hash, zero_id, sizeof(zero_id)) == 0) {
712 ref_update->delete_ref = 1;
713 client->nref_del++;
714 }
715 STAILQ_INSERT_HEAD(&client->ref_updates, ref_update, entry);
716 client->nref_updates++;
717 ref = NULL;
718 ref_update = NULL;
719 done:
720 if (ref)
721 got_ref_close(ref);
722 free(ref_update);
723 free(refname);
724 free(id);
725 return err;
726 }
727
728 static const struct got_error *
729 pack_index_progress(void *arg, uint32_t nobj_total, uint32_t nobj_indexed,
730 uint32_t nobj_loose, uint32_t nobj_resolved)
731 {
732 int p_indexed = 0, p_resolved = 0;
733 int nobj_delta = nobj_total - nobj_loose;
734
735 if (nobj_total > 0)
736 p_indexed = (nobj_indexed * 100) / nobj_total;
737
738 if (nobj_delta > 0)
739 p_resolved = (nobj_resolved * 100) / nobj_delta;
740
741 if (p_resolved > 0) {
742 log_debug("indexing %d objects %d%%; resolving %d deltas %d%%",
743 nobj_total, p_indexed, nobj_delta, p_resolved);
744 } else
745 log_debug("indexing %d objects %d%%", nobj_total, p_indexed);
746
747 return NULL;
748 }
749
750 static const struct got_error *
751 read_more_pack_stream(int infd, BUF *buf, size_t minsize)
752 {
753 const struct got_error *err = NULL;
754 uint8_t readahead[65536];
755 size_t have, newlen;
756
757 err = got_poll_read_full(infd, &have,
758 readahead, sizeof(readahead), minsize);
759 if (err)
760 return err;
761
762 err = buf_append(&newlen, buf, readahead, have);
763 if (err)
764 return err;
765 return NULL;
766 }
767
768 static const struct got_error *
769 copy_object_type_and_size(uint8_t *type, uint64_t *size, int infd, int outfd,
770 off_t *outsize, BUF *buf, size_t *buf_pos, struct got_hash *ctx)
771 {
772 const struct got_error *err = NULL;
773 uint8_t t = 0;
774 uint64_t s = 0;
775 uint8_t sizebuf[8];
776 size_t i = 0;
777 off_t obj_offset = *outsize;
778
779 do {
780 /* We do not support size values which don't fit in 64 bit. */
781 if (i > 9)
782 return got_error_fmt(GOT_ERR_OBJ_TOO_LARGE,
783 "packfile offset %lld", (long long)obj_offset);
784
785 if (buf_len(buf) - *buf_pos < sizeof(sizebuf[0])) {
786 err = read_more_pack_stream(infd, buf,
787 sizeof(sizebuf[0]));
788 if (err)
789 return err;
790 }
791
792 sizebuf[i] = buf_getc(buf, *buf_pos);
793 *buf_pos += sizeof(sizebuf[i]);
794
795 if (i == 0) {
796 t = (sizebuf[i] & GOT_PACK_OBJ_SIZE0_TYPE_MASK) >>
797 GOT_PACK_OBJ_SIZE0_TYPE_MASK_SHIFT;
798 s = (sizebuf[i] & GOT_PACK_OBJ_SIZE0_VAL_MASK);
799 } else {
800 size_t shift = 4 + 7 * (i - 1);
801 s |= ((sizebuf[i] & GOT_PACK_OBJ_SIZE_VAL_MASK) <<
802 shift);
803 }
804 i++;
805 } while (sizebuf[i - 1] & GOT_PACK_OBJ_SIZE_MORE);
806
807 err = got_pack_hwrite(outfd, sizebuf, i, ctx);
808 if (err)
809 return err;
810 *outsize += i;
811
812 *type = t;
813 *size = s;
814 return NULL;
815 }
816
817 static const struct got_error *
818 copy_ref_delta(int infd, int outfd, off_t *outsize, BUF *buf, size_t *buf_pos,
819 struct got_hash *ctx)
820 {
821 const struct got_error *err = NULL;
822 size_t remain = buf_len(buf) - *buf_pos;
823
824 if (remain < SHA1_DIGEST_LENGTH) {
825 err = read_more_pack_stream(infd, buf,
826 SHA1_DIGEST_LENGTH - remain);
827 if (err)
828 return err;
829 }
830
831 err = got_pack_hwrite(outfd, buf_get(buf) + *buf_pos,
832 SHA1_DIGEST_LENGTH, ctx);
833 if (err)
834 return err;
835
836 *buf_pos += SHA1_DIGEST_LENGTH;
837 return NULL;
838 }
839
840 static const struct got_error *
841 copy_offset_delta(int infd, int outfd, off_t *outsize, BUF *buf, size_t *buf_pos,
842 struct got_hash *ctx)
843 {
844 const struct got_error *err = NULL;
845 uint64_t o = 0;
846 uint8_t offbuf[8];
847 size_t i = 0;
848 off_t obj_offset = *outsize;
849
850 do {
851 /* We do not support offset values which don't fit in 64 bit. */
852 if (i > 8)
853 return got_error_fmt(GOT_ERR_OBJ_TOO_LARGE,
854 "packfile offset %lld", (long long)obj_offset);
855
856 if (buf_len(buf) - *buf_pos < sizeof(offbuf[0])) {
857 err = read_more_pack_stream(infd, buf,
858 sizeof(offbuf[0]));
859 if (err)
860 return err;
861 }
862
863 offbuf[i] = buf_getc(buf, *buf_pos);
864 *buf_pos += sizeof(offbuf[i]);
865
866 if (i == 0)
867 o = (offbuf[i] & GOT_PACK_OBJ_DELTA_OFF_VAL_MASK);
868 else {
869 o++;
870 o <<= 7;
871 o += (offbuf[i] & GOT_PACK_OBJ_DELTA_OFF_VAL_MASK);
872 }
873 i++;
874 } while (offbuf[i - 1] & GOT_PACK_OBJ_DELTA_OFF_MORE);
875
876 if (o < sizeof(struct got_packfile_hdr) || o > *outsize)
877 return got_error(GOT_ERR_PACK_OFFSET);
878
879 err = got_pack_hwrite(outfd, offbuf, i, ctx);
880 if (err)
881 return err;
882
883 *outsize += i;
884 return NULL;
885 }
886
887 static const struct got_error *
888 copy_zstream(int infd, int outfd, off_t *outsize, BUF *buf, size_t *buf_pos,
889 struct got_hash *ctx)
890 {
891 const struct got_error *err = NULL;
892 z_stream z;
893 int zret;
894 char voidbuf[1024];
895 size_t consumed_total = 0;
896 off_t zstream_offset = *outsize;
897
898 memset(&z, 0, sizeof(z));
899
900 z.zalloc = Z_NULL;
901 z.zfree = Z_NULL;
902 zret = inflateInit(&z);
903 if (zret != Z_OK) {
904 if (zret == Z_ERRNO)
905 return got_error_from_errno("inflateInit");
906 if (zret == Z_MEM_ERROR) {
907 errno = ENOMEM;
908 return got_error_from_errno("inflateInit");
909 }
910 return got_error_msg(GOT_ERR_DECOMPRESSION,
911 "inflateInit failed");
912 }
913
914 while (zret != Z_STREAM_END) {
915 size_t last_total_in, consumed;
916
917 /*
918 * Decompress into the void. Object data will be parsed
919 * later, when the pack file is indexed. For now, we just
920 * want to locate the end of the compressed stream.
921 */
922 while (zret != Z_STREAM_END && buf_len(buf) - *buf_pos > 0) {
923 last_total_in = z.total_in;
924 z.next_in = buf_get(buf) + *buf_pos;
925 z.avail_in = buf_len(buf) - *buf_pos;
926 z.next_out = voidbuf;
927 z.avail_out = sizeof(voidbuf);
928
929 zret = inflate(&z, Z_SYNC_FLUSH);
930 if (zret != Z_OK && zret != Z_BUF_ERROR &&
931 zret != Z_STREAM_END) {
932 err = got_error_fmt(GOT_ERR_DECOMPRESSION,
933 "packfile offset %lld",
934 (long long)zstream_offset);
935 goto done;
936 }
937 consumed = z.total_in - last_total_in;
938
939 err = got_pack_hwrite(outfd, buf_get(buf) + *buf_pos,
940 consumed, ctx);
941 if (err)
942 goto done;
943
944 err = buf_discard(buf, *buf_pos + consumed);
945 if (err)
946 goto done;
947 *buf_pos = 0;
948
949 consumed_total += consumed;
950 }
951
952 if (zret != Z_STREAM_END) {
953 err = read_more_pack_stream(infd, buf, 1);
954 if (err)
955 goto done;
956 }
957 }
958
959 if (err == NULL)
960 *outsize += consumed_total;
961 done:
962 inflateEnd(&z);
963 return err;
964 }
965
966 static const struct got_error *
967 validate_object_type(int obj_type)
968 {
969 switch (obj_type) {
970 case GOT_OBJ_TYPE_BLOB:
971 case GOT_OBJ_TYPE_COMMIT:
972 case GOT_OBJ_TYPE_TREE:
973 case GOT_OBJ_TYPE_TAG:
974 case GOT_OBJ_TYPE_REF_DELTA:
975 case GOT_OBJ_TYPE_OFFSET_DELTA:
976 return NULL;
977 default:
978 break;
979 }
980
981 return got_error(GOT_ERR_OBJ_TYPE);
982 }
983
984 static const struct got_error *
985 ensure_all_objects_exist_locally(struct gotd_ref_updates *ref_updates)
986 {
987 const struct got_error *err = NULL;
988 struct gotd_ref_update *ref_update;
989 struct got_object *obj;
990
991 STAILQ_FOREACH(ref_update, ref_updates, entry) {
992 err = got_object_open(&obj, repo_write.repo,
993 &ref_update->new_id);
994 if (err)
995 return err;
996 got_object_close(obj);
997 }
998
999 return NULL;
1000 }
1001
1002 static const struct got_error *
1003 recv_packdata(off_t *outsize, uint32_t *nobj, uint8_t *sha1,
1004 int infd, int outfd)
1005 {
1006 const struct got_error *err;
1007 struct repo_write_client *client = &repo_write_client;
1008 struct got_packfile_hdr hdr;
1009 size_t have;
1010 uint32_t nhave = 0;
1011 struct got_hash ctx;
1012 uint8_t expected_sha1[SHA1_DIGEST_LENGTH];
1013 char hex[SHA1_DIGEST_STRING_LENGTH];
1014 BUF *buf = NULL;
1015 size_t buf_pos = 0, remain;
1016 ssize_t w;
1017
1018 *outsize = 0;
1019 *nobj = 0;
1020
1021 /* if only deleting references there's nothing to read */
1022 if (client->nref_updates == client->nref_del)
1023 return NULL;
1024
1025 got_hash_init(&ctx, GOT_HASH_SHA1);
1026
1027 err = got_poll_read_full(infd, &have, &hdr, sizeof(hdr), sizeof(hdr));
1028 if (err)
1029 return err;
1030 if (have != sizeof(hdr))
1031 return got_error_msg(GOT_ERR_BAD_PACKFILE, "short pack file");
1032 *outsize += have;
1033
1034 if (hdr.signature != htobe32(GOT_PACKFILE_SIGNATURE))
1035 return got_error_msg(GOT_ERR_BAD_PACKFILE,
1036 "bad packfile signature");
1037 if (hdr.version != htobe32(GOT_PACKFILE_VERSION))
1038 return got_error_msg(GOT_ERR_BAD_PACKFILE,
1039 "bad packfile version");
1040
1041 *nobj = be32toh(hdr.nobjects);
1042 if (*nobj == 0) {
1043 /*
1044 * Clients which are creating new references only
1045 * will send us an empty pack file.
1046 */
1047 if (client->nref_updates > 0 &&
1048 client->nref_updates == client->nref_new)
1049 return NULL;
1050
1051 /*
1052 * Clients which only move existing refs will send us an empty
1053 * pack file. All referenced objects must exist locally.
1054 */
1055 err = ensure_all_objects_exist_locally(&client->ref_updates);
1056 if (err) {
1057 if (err->code != GOT_ERR_NO_OBJ)
1058 return err;
1059 return got_error_msg(GOT_ERR_BAD_PACKFILE,
1060 "bad packfile with zero objects");
1061 }
1062
1063 client->nref_move = client->nref_updates;
1064 return NULL;
1065 }
1066
1067 log_debug("expecting %d objects", *nobj);
1068
1069 err = got_pack_hwrite(outfd, &hdr, sizeof(hdr), &ctx);
1070 if (err)
1071 return err;
1072
1073 err = buf_alloc(&buf, 65536);
1074 if (err)
1075 return err;
1076
1077 while (nhave != *nobj) {
1078 uint8_t obj_type;
1079 uint64_t obj_size;
1080
1081 err = copy_object_type_and_size(&obj_type, &obj_size,
1082 infd, outfd, outsize, buf, &buf_pos, &ctx);
1083 if (err)
1084 goto done;
1085
1086 err = validate_object_type(obj_type);
1087 if (err)
1088 goto done;
1089
1090 if (obj_type == GOT_OBJ_TYPE_REF_DELTA) {
1091 err = copy_ref_delta(infd, outfd, outsize,
1092 buf, &buf_pos, &ctx);
1093 if (err)
1094 goto done;
1095 } else if (obj_type == GOT_OBJ_TYPE_OFFSET_DELTA) {
1096 err = copy_offset_delta(infd, outfd, outsize,
1097 buf, &buf_pos, &ctx);
1098 if (err)
1099 goto done;
1100 }
1101
1102 err = copy_zstream(infd, outfd, outsize, buf, &buf_pos, &ctx);
1103 if (err)
1104 goto done;
1105
1106 nhave++;
1107 }
1108
1109 log_debug("received %u objects", *nobj);
1110
1111 got_hash_final(&ctx, expected_sha1);
1112
1113 remain = buf_len(buf) - buf_pos;
1114 if (remain < SHA1_DIGEST_LENGTH) {
1115 err = read_more_pack_stream(infd, buf,
1116 SHA1_DIGEST_LENGTH - remain);
1117 if (err)
1118 return err;
1119 }
1120
1121 got_sha1_digest_to_str(expected_sha1, hex, sizeof(hex));
1122 log_debug("expect SHA1: %s", hex);
1123 got_sha1_digest_to_str(buf_get(buf) + buf_pos, hex, sizeof(hex));
1124 log_debug("actual SHA1: %s", hex);
1125
1126 if (memcmp(buf_get(buf) + buf_pos, expected_sha1,
1127 SHA1_DIGEST_LENGTH) != 0) {
1128 err = got_error(GOT_ERR_PACKFILE_CSUM);
1129 goto done;
1130 }
1131
1132 memcpy(sha1, expected_sha1, SHA1_DIGEST_LENGTH);
1133
1134 w = write(outfd, expected_sha1, SHA1_DIGEST_LENGTH);
1135 if (w == -1) {
1136 err = got_error_from_errno("write");
1137 goto done;
1138 }
1139 if (w != SHA1_DIGEST_LENGTH) {
1140 err = got_error(GOT_ERR_IO);
1141 goto done;
1142 }
1143
1144 *outsize += SHA1_DIGEST_LENGTH;
1145
1146 if (fsync(outfd) == -1) {
1147 err = got_error_from_errno("fsync");
1148 goto done;
1149 }
1150 if (lseek(outfd, 0L, SEEK_SET) == -1) {
1151 err = got_error_from_errno("lseek");
1152 goto done;
1153 }
1154 done:
1155 buf_free(buf);
1156 return err;
1157 }
1158
1159 static const struct got_error *
1160 report_pack_status(const struct got_error *unpack_err)
1161 {
1162 const struct got_error *err = NULL;
1163 struct repo_write_client *client = &repo_write_client;
1164 struct gotd_imsg_packfile_status istatus;
1165 struct ibuf *wbuf;
1166 struct imsgbuf ibuf;
1167 const char *unpack_ok = "unpack ok\n";
1168 size_t len;
1169
1170 if (imsgbuf_init(&ibuf, client->fd))
1171 return got_error_from_errno("imsgbuf_init");
1172 imsgbuf_allow_fdpass(&ibuf);
1173
1174 if (unpack_err)
1175 istatus.reason_len = strlen(unpack_err->msg);
1176 else
1177 istatus.reason_len = strlen(unpack_ok);
1178
1179 len = sizeof(istatus) + istatus.reason_len;
1180 wbuf = imsg_create(&ibuf, GOTD_IMSG_PACKFILE_STATUS, PROC_REPO_WRITE,
1181 repo_write.pid, len);
1182 if (wbuf == NULL) {
1183 err = got_error_from_errno("imsg_create PACKFILE_STATUS");
1184 goto done;
1185 }
1186
1187 if (imsg_add(wbuf, &istatus, sizeof(istatus)) == -1) {
1188 err = got_error_from_errno("imsg_add PACKFILE_STATUS");
1189 goto done;
1190 }
1191
1192 if (imsg_add(wbuf, err ? err->msg : unpack_ok,
1193 istatus.reason_len) == -1) {
1194 err = got_error_from_errno("imsg_add PACKFILE_STATUS");
1195 goto done;
1196 }
1197
1198 imsg_close(&ibuf, wbuf);
1199
1200 err = gotd_imsg_flush(&ibuf);
1201 done:
1202 imsgbuf_clear(&ibuf);
1203 return err;
1204 }
1205
1206 static const struct got_error *
1207 recv_packfile(int *have_packfile, struct imsg *imsg)
1208 {
1209 const struct got_error *err = NULL, *unpack_err;
1210 struct repo_write_client *client = &repo_write_client;
1211 struct gotd_imsg_recv_packfile ireq;
1212 struct got_object_id id;
1213 FILE *tempfiles[3] = { NULL, NULL, NULL };
1214 struct repo_tempfile {
1215 int fd;
1216 int idx;
1217 } repo_tempfiles[3] = { { - 1, - 1 }, { - 1, - 1 }, { - 1, - 1 }, };
1218 int i;
1219 size_t datalen;
1220 struct got_ratelimit rl;
1221 struct got_pack *pack = NULL;
1222 off_t pack_filesize = 0;
1223 uint32_t nobj = 0;
1224
1225 log_debug("packfile request received");
1226
1227 *have_packfile = 0;
1228 got_ratelimit_init(&rl, 2, 0);
1229
1230 datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
1231 if (datalen != sizeof(ireq))
1232 return got_error(GOT_ERR_PRIVSEP_LEN);
1233 memcpy(&ireq, imsg->data, sizeof(ireq));
1234
1235 if (client->pack_pipe == -1 || client->packidx_fd == -1)
1236 return got_error(GOT_ERR_PRIVSEP_NO_FD);
1237
1238 pack = &client->pack;
1239 memset(pack, 0, sizeof(*pack));
1240 pack->fd = imsg_get_fd(imsg);
1241 if (pack->fd == -1) {
1242 err = got_error(GOT_ERR_PRIVSEP_NO_FD);
1243 goto done;
1244 }
1245
1246 err = got_delta_cache_alloc(&pack->delta_cache);
1247 if (err)
1248 goto done;
1249
1250 for (i = 0; i < nitems(repo_tempfiles); i++) {
1251 struct repo_tempfile *t = &repo_tempfiles[i];
1252 err = got_repo_temp_fds_get(&t->fd, &t->idx, repo_write.repo);
1253 if (err)
1254 goto done;
1255 }
1256
1257 for (i = 0; i < nitems(tempfiles); i++) {
1258 int fd;
1259 FILE *f;
1260
1261 fd = dup(repo_tempfiles[i].fd);
1262 if (fd == -1) {
1263 err = got_error_from_errno("dup");
1264 goto done;
1265 }
1266 f = fdopen(fd, "w+");
1267 if (f == NULL) {
1268 err = got_error_from_errno("fdopen");
1269 close(fd);
1270 goto done;
1271 }
1272 tempfiles[i] = f;
1273 }
1274
1275 log_debug("receiving pack data");
1276 unpack_err = recv_packdata(&pack_filesize, &nobj,
1277 client->pack_sha1, client->pack_pipe, pack->fd);
1278 if (ireq.report_status) {
1279 err = report_pack_status(unpack_err);
1280 if (err) {
1281 /* Git clients hang up after sending the pack file. */
1282 if (err->code == GOT_ERR_EOF)
1283 err = NULL;
1284 }
1285 }
1286 if (unpack_err)
1287 err = unpack_err;
1288 if (err)
1289 goto done;
1290
1291 log_debug("pack data received");
1292
1293 /*
1294 * Clients which are creating new references only will
1295 * send us an empty pack file.
1296 */
1297 if (nobj == 0 &&
1298 pack_filesize == sizeof(struct got_packfile_hdr) &&
1299 client->nref_updates > 0 &&
1300 client->nref_updates == client->nref_new)
1301 goto done;
1302
1303 /*
1304 * Clients which are deleting references only will send
1305 * no pack file.
1306 */
1307 if (nobj == 0 &&
1308 client->nref_del > 0 &&
1309 client->nref_updates == client->nref_del)
1310 goto done;
1311
1312 /*
1313 * Clients which only move existing refs will send us an empty
1314 * pack file. All referenced objects must exist locally.
1315 */
1316 if (nobj == 0 &&
1317 pack_filesize == sizeof(struct got_packfile_hdr) &&
1318 client->nref_move > 0 &&
1319 client->nref_updates == client->nref_move)
1320 goto done;
1321
1322 pack->filesize = pack_filesize;
1323 *have_packfile = 1;
1324
1325 memset(&id, 0, sizeof(id));
1326 memcpy(&id.hash, client->pack_sha1, SHA1_DIGEST_LENGTH);
1327 id.algo = GOT_HASH_SHA1;
1328
1329 log_debug("begin indexing pack (%lld bytes in size)",
1330 (long long)pack->filesize);
1331 err = got_pack_index(pack, client->packidx_fd,
1332 tempfiles[0], tempfiles[1], tempfiles[2], &id,
1333 pack_index_progress, NULL, &rl);
1334 if (err)
1335 goto done;
1336 log_debug("done indexing pack");
1337
1338 if (fsync(client->packidx_fd) == -1) {
1339 err = got_error_from_errno("fsync");
1340 goto done;
1341 }
1342 if (lseek(client->packidx_fd, 0L, SEEK_SET) == -1)
1343 err = got_error_from_errno("lseek");
1344 done:
1345 if (close(client->pack_pipe) == -1 && err == NULL)
1346 err = got_error_from_errno("close");
1347 client->pack_pipe = -1;
1348 for (i = 0; i < nitems(repo_tempfiles); i++) {
1349 struct repo_tempfile *t = &repo_tempfiles[i];
1350 if (t->idx != -1)
1351 got_repo_temp_fds_put(t->idx, repo_write.repo);
1352 }
1353 for (i = 0; i < nitems(tempfiles); i++) {
1354 if (tempfiles[i] && fclose(tempfiles[i]) == EOF && err == NULL)
1355 err = got_error_from_errno("fclose");
1356 }
1357 if (err)
1358 got_pack_close(pack);
1359 return err;
1360 }
1361
1362 static const struct got_error *
1363 verify_packfile(void)
1364 {
1365 const struct got_error *err = NULL, *close_err;
1366 struct repo_write_client *client = &repo_write_client;
1367 struct gotd_ref_update *ref_update;
1368 struct got_packidx *packidx = NULL;
1369 struct stat sb;
1370 char *id_str = NULL;
1371 struct got_object *obj = NULL;
1372 struct got_pathlist_entry *pe;
1373 char hex[SHA1_DIGEST_STRING_LENGTH];
1374
1375 if (STAILQ_EMPTY(&client->ref_updates)) {
1376 return got_error_msg(GOT_ERR_BAD_REQUEST,
1377 "cannot verify pack file without any ref-updates");
1378 }
1379
1380 if (client->pack.fd == -1) {
1381 return got_error_msg(GOT_ERR_BAD_REQUEST,
1382 "invalid pack file handle during pack verification");
1383 }
1384 if (client->packidx_fd == -1) {
1385 return got_error_msg(GOT_ERR_BAD_REQUEST,
1386 "invalid pack index handle during pack verification");
1387 }
1388
1389 if (fstat(client->packidx_fd, &sb) == -1)
1390 return got_error_from_errno("pack index fstat");
1391
1392 packidx = malloc(sizeof(*packidx));
1393 memset(packidx, 0, sizeof(*packidx));
1394 packidx->fd = client->packidx_fd;
1395 client->packidx_fd = -1;
1396 packidx->len = sb.st_size;
1397
1398 err = got_packidx_init_hdr(packidx, 1, client->pack.filesize);
1399 if (err)
1400 return err;
1401
1402 STAILQ_FOREACH(ref_update, &client->ref_updates, entry) {
1403 if (ref_update->delete_ref)
1404 continue;
1405
1406 TAILQ_FOREACH(pe, repo_write.protected_tag_namespaces, entry) {
1407 err = protect_tag_namespace(pe->path, &client->pack,
1408 packidx, ref_update);
1409 if (err)
1410 goto done;
1411 }
1412
1413 /*
1414 * Objects which already exist in our repository need
1415 * not be present in the pack file.
1416 */
1417 err = got_object_open(&obj, repo_write.repo,
1418 &ref_update->new_id);
1419 if (err && err->code != GOT_ERR_NO_OBJ)
1420 goto done;
1421 err = NULL;
1422 if (obj) {
1423 got_object_close(obj);
1424 obj = NULL;
1425 } else {
1426 int idx = got_packidx_get_object_idx(packidx,
1427 &ref_update->new_id);
1428 if (idx == -1) {
1429 got_object_id_hex(&ref_update->new_id,
1430 hex, sizeof(hex));
1431 err = got_error_fmt(GOT_ERR_BAD_PACKFILE,
1432 "object %s is missing from pack file",
1433 hex);
1434 goto done;
1435 }
1436 }
1437
1438 TAILQ_FOREACH(pe, repo_write.protected_branch_namespaces,
1439 entry) {
1440 err = protect_branch_namespace(pe->path,
1441 &client->pack, packidx, ref_update);
1442 if (err)
1443 goto done;
1444 }
1445 TAILQ_FOREACH(pe, repo_write.protected_branches, entry) {
1446 err = protect_branch(pe->path, &client->pack,
1447 packidx, ref_update);
1448 if (err)
1449 goto done;
1450 }
1451 }
1452
1453 done:
1454 close_err = got_packidx_close(packidx);
1455 if (close_err && err == NULL)
1456 err = close_err;
1457 free(id_str);
1458 if (obj)
1459 got_object_close(obj);
1460 return err;
1461 }
1462
1463 static const struct got_error *
1464 protect_refs_from_deletion(void)
1465 {
1466 const struct got_error *err = NULL;
1467 struct repo_write_client *client = &repo_write_client;
1468 struct gotd_ref_update *ref_update;
1469 struct got_pathlist_entry *pe;
1470 const char *refname;
1471
1472 STAILQ_FOREACH(ref_update, &client->ref_updates, entry) {
1473 if (!ref_update->delete_ref)
1474 continue;
1475
1476 refname = got_ref_get_name(ref_update->ref);
1477
1478 TAILQ_FOREACH(pe, repo_write.protected_tag_namespaces, entry) {
1479 err = protect_ref_namespace(refname, pe->path);
1480 if (err)
1481 return err;
1482 }
1483
1484 TAILQ_FOREACH(pe, repo_write.protected_branch_namespaces,
1485 entry) {
1486 err = protect_ref_namespace(refname, pe->path);
1487 if (err)
1488 return err;
1489 }
1490
1491 TAILQ_FOREACH(pe, repo_write.protected_branches, entry) {
1492 if (strcmp(refname, pe->path) == 0) {
1493 return got_error_fmt(GOT_ERR_REF_PROTECTED,
1494 "%s", refname);
1495 }
1496 }
1497 }
1498
1499 return NULL;
1500 }
1501
1502 static const struct got_error *
1503 install_packfile(struct gotd_imsgev *iev)
1504 {
1505 struct repo_write_client *client = &repo_write_client;
1506 struct gotd_imsg_packfile_install inst;
1507 int ret;
1508
1509 memset(&inst, 0, sizeof(inst));
1510 memcpy(inst.pack_sha1, client->pack_sha1, SHA1_DIGEST_LENGTH);
1511
1512 ret = gotd_imsg_compose_event(iev, GOTD_IMSG_PACKFILE_INSTALL,
1513 PROC_REPO_WRITE, -1, &inst, sizeof(inst));
1514 if (ret == -1)
1515 return got_error_from_errno("imsg_compose PACKFILE_INSTALL");
1516
1517 return NULL;
1518 }
1519
1520 static const struct got_error *
1521 send_ref_updates_start(int nref_updates, struct gotd_imsgev *iev)
1522 {
1523 struct gotd_imsg_ref_updates_start istart;
1524 int ret;
1525
1526 memset(&istart, 0, sizeof(istart));
1527 istart.nref_updates = nref_updates;
1528
1529 ret = gotd_imsg_compose_event(iev, GOTD_IMSG_REF_UPDATES_START,
1530 PROC_REPO_WRITE, -1, &istart, sizeof(istart));
1531 if (ret == -1)
1532 return got_error_from_errno("imsg_compose REF_UPDATES_START");
1533
1534 return NULL;
1535 }
1536
1537
1538 static const struct got_error *
1539 send_ref_update(struct gotd_ref_update *ref_update, struct gotd_imsgev *iev)
1540 {
1541 struct gotd_imsg_ref_update iref;
1542 const char *refname = got_ref_get_name(ref_update->ref);
1543 struct ibuf *wbuf;
1544 size_t len;
1545
1546 memset(&iref, 0, sizeof(iref));
1547 memcpy(iref.old_id, ref_update->old_id.hash, SHA1_DIGEST_LENGTH);
1548 memcpy(iref.new_id, ref_update->new_id.hash, SHA1_DIGEST_LENGTH);
1549 iref.ref_is_new = ref_update->ref_is_new;
1550 iref.delete_ref = ref_update->delete_ref;
1551 iref.name_len = strlen(refname);
1552
1553 len = sizeof(iref) + iref.name_len;
1554 wbuf = imsg_create(&iev->ibuf, GOTD_IMSG_REF_UPDATE, PROC_REPO_WRITE,
1555 repo_write.pid, len);
1556 if (wbuf == NULL)
1557 return got_error_from_errno("imsg_create REF_UPDATE");
1558
1559 if (imsg_add(wbuf, &iref, sizeof(iref)) == -1)
1560 return got_error_from_errno("imsg_add REF_UPDATE");
1561 if (imsg_add(wbuf, refname, iref.name_len) == -1)
1562 return got_error_from_errno("imsg_add REF_UPDATE");
1563
1564 imsg_close(&iev->ibuf, wbuf);
1565
1566 gotd_imsg_event_add(iev);
1567 return NULL;
1568 }
1569
1570 static const struct got_error *
1571 update_refs(struct gotd_imsgev *iev)
1572 {
1573 const struct got_error *err = NULL;
1574 struct repo_write_client *client = &repo_write_client;
1575 struct gotd_ref_update *ref_update;
1576
1577 err = send_ref_updates_start(client->nref_updates, iev);
1578 if (err)
1579 return err;
1580
1581 STAILQ_FOREACH(ref_update, &client->ref_updates, entry) {
1582 err = send_ref_update(ref_update, iev);
1583 if (err)
1584 goto done;
1585 }
1586 done:
1587 return err;
1588 }
1589
1590 static const struct got_error *
1591 receive_pack_pipe(struct imsg *imsg, struct gotd_imsgev *iev)
1592 {
1593 struct repo_write_client *client = &repo_write_client;
1594 size_t datalen;
1595
1596 log_debug("receiving pack pipe descriptor");
1597
1598 datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
1599 if (datalen != 0)
1600 return got_error(GOT_ERR_PRIVSEP_LEN);
1601
1602 if (client->pack_pipe != -1)
1603 return got_error(GOT_ERR_PRIVSEP_MSG);
1604
1605 client->pack_pipe = imsg_get_fd(imsg);
1606 if (client->pack_pipe == -1)
1607 return got_error(GOT_ERR_PRIVSEP_NO_FD);
1608
1609 return NULL;
1610 }
1611
1612 static const struct got_error *
1613 receive_pack_idx(struct imsg *imsg, struct gotd_imsgev *iev)
1614 {
1615 struct repo_write_client *client = &repo_write_client;
1616 size_t datalen;
1617
1618 log_debug("receiving pack index output file");
1619
1620 datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
1621 if (datalen != 0)
1622 return got_error(GOT_ERR_PRIVSEP_LEN);
1623
1624 if (client->packidx_fd != -1)
1625 return got_error(GOT_ERR_PRIVSEP_MSG);
1626
1627 client->packidx_fd = imsg_get_fd(imsg);
1628 if (client->packidx_fd == -1)
1629 return got_error(GOT_ERR_PRIVSEP_NO_FD);
1630
1631 return NULL;
1632 }
1633
1634 static const struct got_error *
1635 notify_removed_ref(const char *refname, struct got_object_id *id,
1636 struct gotd_imsgev *iev, int fd)
1637 {
1638 const struct got_error *err;
1639 char *id_str;
1640
1641 err = got_object_id_str(&id_str, id);
1642 if (err)
1643 return err;
1644
1645 dprintf(fd, "Removed %s: %s\n", refname, id_str);
1646 free(id_str);
1647 return err;
1648 }
1649
1650 static const char *
1651 format_author(char *author)
1652 {
1653 char *smallerthan;
1654
1655 smallerthan = strchr(author, '<');
1656 if (smallerthan && smallerthan[1] != '\0')
1657 author = smallerthan + 1;
1658 author[strcspn(author, "@>")] = '\0';
1659
1660 return author;
1661 }
1662
1663 static const struct got_error *
1664 print_commit_oneline(struct got_commit_object *commit, struct got_object_id *id,
1665 struct got_repository *repo, int fd)
1666 {
1667 const struct got_error *err = NULL;
1668 char *id_str = NULL, *logmsg0 = NULL;
1669 char *s, *nl;
1670 char *committer = NULL, *author = NULL;
1671 time_t committer_time;
1672
1673 err = got_object_id_str(&id_str, id);
1674 if (err)
1675 return err;
1676
1677 committer_time = got_object_commit_get_committer_time(commit);
1678
1679 err = got_object_commit_get_logmsg(&logmsg0, commit);
1680 if (err)
1681 goto done;
1682
1683 s = logmsg0;
1684 while (isspace((unsigned char)s[0]))
1685 s++;
1686
1687 nl = strchr(s, '\n');
1688 if (nl) {
1689 *nl = '\0';
1690 }
1691
1692 if (strcmp(got_object_commit_get_author(commit),
1693 got_object_commit_get_committer(commit)) != 0) {
1694 author = strdup(got_object_commit_get_author(commit));
1695 if (author == NULL) {
1696 err = got_error_from_errno("strdup");
1697 goto done;
1698 }
1699 dprintf(fd, "%lld %.7s %.8s %s\n", (long long)committer_time,
1700 id_str, format_author(author), s);
1701 } else {
1702 committer = strdup(got_object_commit_get_committer(commit));
1703 dprintf(fd, "%lld %.7s %.8s %s\n", (long long)committer_time,
1704 id_str, format_author(committer), s);
1705 }
1706
1707 if (fsync(fd) == -1 && err == NULL)
1708 err = got_error_from_errno("fsync");
1709 done:
1710 free(id_str);
1711 free(logmsg0);
1712 free(committer);
1713 free(author);
1714 return err;
1715 }
1716
1717 static const struct got_error *
1718 print_diffstat(struct got_diffstat_cb_arg *dsa, int fd)
1719 {
1720 struct got_pathlist_entry *pe;
1721
1722 TAILQ_FOREACH(pe, dsa->paths, entry) {
1723 struct got_diff_changed_path *cp = pe->data;
1724 int pad = dsa->max_path_len - pe->path_len + 1;
1725
1726 dprintf(fd, " %c %s%*c | %*d+ %*d-\n", cp->status,
1727 pe->path, pad, ' ', dsa->add_cols + 1, cp->add,
1728 dsa->rm_cols + 1, cp->rm);
1729 }
1730 dprintf(fd,
1731 "\n%d file%s changed, %d insertion%s(+), %d deletion%s(-)\n\n",
1732 dsa->nfiles, dsa->nfiles > 1 ? "s" : "", dsa->ins,
1733 dsa->ins != 1 ? "s" : "", dsa->del, dsa->del != 1 ? "s" : "");
1734
1735 return NULL;
1736 }
1737
1738 static const struct got_error *
1739 print_commit(struct got_commit_object *commit, struct got_object_id *id,
1740 struct got_repository *repo, struct got_pathlist_head *changed_paths,
1741 struct got_diffstat_cb_arg *diffstat, int fd)
1742 {
1743 const struct got_error *err = NULL;
1744 char *id_str, *logmsg0, *logmsg, *line;
1745 time_t committer_time;
1746 const char *author, *committer;
1747
1748 err = got_object_id_str(&id_str, id);
1749 if (err)
1750 return err;
1751
1752 dprintf(fd, "commit %s\n", id_str);
1753 free(id_str);
1754 id_str = NULL;
1755 dprintf(fd, "from: %s\n", got_object_commit_get_author(commit));
1756 author = got_object_commit_get_author(commit);
1757 committer = got_object_commit_get_committer(commit);
1758 if (strcmp(author, committer) != 0)
1759 dprintf(fd, "via: %s\n", committer);
1760 committer_time = got_object_commit_get_committer_time(commit);
1761 dprintf(fd, "date: %lld\n", (long long)committer_time);
1762 if (got_object_commit_get_nparents(commit) > 1) {
1763 const struct got_object_id_queue *parent_ids;
1764 struct got_object_qid *qid;
1765 int n = 1;
1766 parent_ids = got_object_commit_get_parent_ids(commit);
1767 STAILQ_FOREACH(qid, parent_ids, entry) {
1768 err = got_object_id_str(&id_str, &qid->id);
1769 if (err)
1770 goto done;
1771 dprintf(fd, "parent %d: %s\n", n++, id_str);
1772 free(id_str);
1773 id_str = NULL;
1774 }
1775 }
1776
1777 err = got_object_commit_get_logmsg(&logmsg0, commit);
1778 if (err)
1779 goto done;
1780
1781 dprintf(fd, "messagelen: %zu\n", strlen(logmsg0));
1782
1783 logmsg = logmsg0;
1784 do {
1785 line = strsep(&logmsg, "\n");
1786 if (line)
1787 dprintf(fd, " %s\n", line);
1788 } while (line);
1789 free(logmsg0);
1790
1791 err = print_diffstat(diffstat, fd);
1792 if (err)
1793 goto done;
1794
1795 if (fsync(fd) == -1 && err == NULL)
1796 err = got_error_from_errno("fsync");
1797 done:
1798 free(id_str);
1799 return err;
1800 }
1801
1802 static const struct got_error *
1803 get_changed_paths(struct got_pathlist_head *paths,
1804 struct got_commit_object *commit, struct got_repository *repo,
1805 struct got_diffstat_cb_arg *dsa)
1806 {
1807 const struct got_error *err = NULL;
1808 struct got_object_id *tree_id1 = NULL, *tree_id2 = NULL;
1809 struct got_tree_object *tree1 = NULL, *tree2 = NULL;
1810 struct got_object_qid *qid;
1811 got_diff_blob_cb cb = got_diff_tree_collect_changed_paths;
1812 FILE *f1 = repo_write.diff.f1, *f2 = repo_write.diff.f2;
1813 int fd1 = repo_write.diff.fd1, fd2 = repo_write.diff.fd2;
1814
1815 if (dsa)
1816 cb = got_diff_tree_compute_diffstat;
1817
1818 err = got_opentemp_truncate(f1);
1819 if (err)
1820 return err;
1821 err = got_opentemp_truncate(f2);
1822 if (err)
1823 return err;
1824 err = got_opentemp_truncatefd(fd1);
1825 if (err)
1826 return err;
1827 err = got_opentemp_truncatefd(fd2);
1828 if (err)
1829 return err;
1830
1831 qid = STAILQ_FIRST(got_object_commit_get_parent_ids(commit));
1832 if (qid != NULL) {
1833 struct got_commit_object *pcommit;
1834 err = got_object_open_as_commit(&pcommit, repo,
1835 &qid->id);
1836 if (err)
1837 return err;
1838
1839 tree_id1 = got_object_id_dup(
1840 got_object_commit_get_tree_id(pcommit));
1841 if (tree_id1 == NULL) {
1842 got_object_commit_close(pcommit);
1843 return got_error_from_errno("got_object_id_dup");
1844 }
1845 got_object_commit_close(pcommit);
1846
1847 }
1848
1849 if (tree_id1) {
1850 err = got_object_open_as_tree(&tree1, repo, tree_id1);
1851 if (err)
1852 goto done;
1853 }
1854
1855 tree_id2 = got_object_commit_get_tree_id(commit);
1856 err = got_object_open_as_tree(&tree2, repo, tree_id2);
1857 if (err)
1858 goto done;
1859
1860 err = got_diff_tree(tree1, tree2, f1, f2, fd1, fd2, "", "", repo,
1861 cb, dsa ? (void *)dsa : paths, dsa ? 1 : 0);
1862 done:
1863 if (tree1)
1864 got_object_tree_close(tree1);
1865 if (tree2)
1866 got_object_tree_close(tree2);
1867 free(tree_id1);
1868 return err;
1869 }
1870
1871 static const struct got_error *
1872 print_commits(struct got_object_id *root_id, struct got_object_id *end_id,
1873 struct got_repository *repo, int fd)
1874 {
1875 const struct got_error *err;
1876 struct got_commit_graph *graph;
1877 struct got_object_id_queue reversed_commits;
1878 struct got_object_qid *qid;
1879 struct got_commit_object *commit = NULL;
1880 struct got_pathlist_head changed_paths;
1881 int ncommits = 0;
1882 const int shortlog_threshold = 50;
1883
1884 STAILQ_INIT(&reversed_commits);
1885 TAILQ_INIT(&changed_paths);
1886
1887 /* XXX first-parent only for now */
1888 err = got_commit_graph_open(&graph, "/", 1);
1889 if (err)
1890 return err;
1891 err = got_commit_graph_bfsort(graph, root_id, repo,
1892 check_cancelled, NULL);
1893 if (err)
1894 goto done;
1895 for (;;) {
1896 struct got_object_id id;
1897
1898 err = got_commit_graph_iter_next(&id, graph, repo,
1899 check_cancelled, NULL);
1900 if (err) {
1901 if (err->code == GOT_ERR_ITER_COMPLETED)
1902 err = NULL;
1903 break;
1904 }
1905
1906 err = got_object_open_as_commit(&commit, repo, &id);
1907 if (err)
1908 break;
1909
1910 if (end_id && got_object_id_cmp(&id, end_id) == 0)
1911 break;
1912
1913 err = got_object_qid_alloc(&qid, &id);
1914 if (err)
1915 break;
1916
1917 STAILQ_INSERT_HEAD(&reversed_commits, qid, entry);
1918 ncommits++;
1919 got_object_commit_close(commit);
1920
1921 if (end_id == NULL)
1922 break;
1923 }
1924
1925 STAILQ_FOREACH(qid, &reversed_commits, entry) {
1926 struct got_diffstat_cb_arg dsa = { 0, 0, 0, 0, 0, 0,
1927 &changed_paths, 0, 0, GOT_DIFF_ALGORITHM_PATIENCE };
1928
1929 err = got_object_open_as_commit(&commit, repo, &qid->id);
1930 if (err)
1931 break;
1932
1933 if (ncommits > shortlog_threshold) {
1934 err = print_commit_oneline(commit, &qid->id,
1935 repo, fd);
1936 if (err)
1937 break;
1938 } else {
1939 err = get_changed_paths(&changed_paths, commit,
1940 repo, &dsa);
1941 if (err)
1942 break;
1943 err = print_commit(commit, &qid->id, repo,
1944 &changed_paths, &dsa, fd);
1945 }
1946 got_object_commit_close(commit);
1947 commit = NULL;
1948 got_pathlist_free(&changed_paths, GOT_PATHLIST_FREE_ALL);
1949 }
1950 done:
1951 if (commit)
1952 got_object_commit_close(commit);
1953 while (!STAILQ_EMPTY(&reversed_commits)) {
1954 qid = STAILQ_FIRST(&reversed_commits);
1955 STAILQ_REMOVE_HEAD(&reversed_commits, entry);
1956 got_object_qid_free(qid);
1957 }
1958 got_pathlist_free(&changed_paths, GOT_PATHLIST_FREE_ALL);
1959 got_commit_graph_close(graph);
1960 return err;
1961 }
1962
1963 static const struct got_error *
1964 print_tag(struct got_object_id *id,
1965 const char *refname, struct got_repository *repo, int fd)
1966 {
1967 const struct got_error *err = NULL;
1968 struct got_tag_object *tag = NULL;
1969 const char *tagger = NULL;
1970 char *id_str = NULL, *tagmsg0 = NULL, *tagmsg, *line;
1971 time_t tagger_time;
1972
1973 err = got_object_open_as_tag(&tag, repo, id);
1974 if (err)
1975 return err;
1976
1977 tagger = got_object_tag_get_tagger(tag);
1978 tagger_time = got_object_tag_get_tagger_time(tag);
1979 err = got_object_id_str(&id_str,
1980 got_object_tag_get_object_id(tag));
1981 if (err)
1982 goto done;
1983
1984 dprintf(fd, "tag %s\n", refname);
1985 dprintf(fd, "from: %s\n", tagger);
1986 dprintf(fd, "date: %lld\n", (long long)tagger_time);
1987
1988 switch (got_object_tag_get_object_type(tag)) {
1989 case GOT_OBJ_TYPE_BLOB:
1990 dprintf(fd, "object: %s %s\n", GOT_OBJ_LABEL_BLOB, id_str);
1991 break;
1992 case GOT_OBJ_TYPE_TREE:
1993 dprintf(fd, "object: %s %s\n", GOT_OBJ_LABEL_TREE, id_str);
1994 break;
1995 case GOT_OBJ_TYPE_COMMIT:
1996 dprintf(fd, "object: %s %s\n", GOT_OBJ_LABEL_COMMIT, id_str);
1997 break;
1998 case GOT_OBJ_TYPE_TAG:
1999 dprintf(fd, "object: %s %s\n", GOT_OBJ_LABEL_TAG, id_str);
2000 break;
2001 default:
2002 break;
2003 }
2004
2005 tagmsg0 = strdup(got_object_tag_get_message(tag));
2006 if (tagmsg0 == NULL) {
2007 err = got_error_from_errno("strdup");
2008 goto done;
2009 }
2010
2011 dprintf(fd, "messagelen: %zu\n", strlen(tagmsg0));
2012
2013 tagmsg = tagmsg0;
2014 do {
2015 line = strsep(&tagmsg, "\n");
2016 if (line)
2017 dprintf(fd, " %s\n", line);
2018 } while (line);
2019 free(tagmsg0);
2020 done:
2021 if (tag)
2022 got_object_tag_close(tag);
2023 free(id_str);
2024 return err;
2025 }
2026
2027 static const struct got_error *
2028 notify_changed_ref(const char *refname, struct got_object_id *old_id,
2029 struct got_object_id *new_id, struct gotd_imsgev *iev, int fd)
2030 {
2031 const struct got_error *err;
2032 int old_obj_type, new_obj_type;
2033 const char *label;
2034 char *new_id_str = NULL;
2035
2036 err = got_object_get_type(&old_obj_type, repo_write.repo, old_id);
2037 if (err)
2038 return err;
2039
2040 err = got_object_get_type(&new_obj_type, repo_write.repo, new_id);
2041 if (err)
2042 return err;
2043
2044 switch (new_obj_type) {
2045 case GOT_OBJ_TYPE_COMMIT:
2046 err = print_commits(new_id,
2047 old_obj_type == GOT_OBJ_TYPE_COMMIT ? old_id : NULL,
2048 repo_write.repo, fd);
2049 break;
2050 case GOT_OBJ_TYPE_TAG:
2051 err = print_tag(new_id, refname, repo_write.repo, fd);
2052 break;
2053 default:
2054 err = got_object_type_label(&label, new_obj_type);
2055 if (err)
2056 goto done;
2057 err = got_object_id_str(&new_id_str, new_id);
2058 if (err)
2059 goto done;
2060 dprintf(fd, "%s: %s object %s\n", refname, label, new_id_str);
2061 break;
2062 }
2063 done:
2064 free(new_id_str);
2065 return err;
2066 }
2067
2068 static const struct got_error *
2069 notify_created_ref(const char *refname, struct got_object_id *id,
2070 struct gotd_imsgev *iev, int fd)
2071 {
2072 const struct got_error *err;
2073 int obj_type;
2074
2075 err = got_object_get_type(&obj_type, repo_write.repo, id);
2076 if (err)
2077 return err;
2078
2079 if (obj_type == GOT_OBJ_TYPE_TAG)
2080 return print_tag(id, refname, repo_write.repo, fd);
2081
2082 return print_commits(id, NULL, repo_write.repo, fd);
2083 }
2084
2085 static const struct got_error *
2086 render_notification(struct imsg *imsg, struct gotd_imsgev *iev)
2087 {
2088 const struct got_error *err = NULL;
2089 struct gotd_imsg_notification_content ireq;
2090 size_t datalen, len;
2091 char *refname = NULL;
2092 struct ibuf *wbuf;
2093 int fd = -1;
2094
2095 fd = imsg_get_fd(imsg);
2096 if (fd == -1)
2097 return got_error(GOT_ERR_PRIVSEP_NO_FD);
2098
2099 datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
2100 if (datalen < sizeof(ireq)) {
2101 err = got_error(GOT_ERR_PRIVSEP_LEN);
2102 goto done;
2103 }
2104
2105 memcpy(&ireq, imsg->data, sizeof(ireq));
2106
2107 if (datalen != sizeof(ireq) + ireq.refname_len) {
2108 err = got_error(GOT_ERR_PRIVSEP_LEN);
2109 goto done;
2110 }
2111
2112 refname = strndup(imsg->data + sizeof(ireq), ireq.refname_len);
2113 if (refname == NULL) {
2114 err = got_error_from_errno("strndup");
2115 goto done;
2116 }
2117
2118 switch (ireq.action) {
2119 case GOTD_NOTIF_ACTION_CREATED:
2120 err = notify_created_ref(refname, &ireq.new_id, iev, fd);
2121 break;
2122 case GOTD_NOTIF_ACTION_REMOVED:
2123 err = notify_removed_ref(refname, &ireq.old_id, iev, fd);
2124 break;
2125 case GOTD_NOTIF_ACTION_CHANGED:
2126 err = notify_changed_ref(refname, &ireq.old_id, &ireq.new_id,
2127 iev, fd);
2128 break;
2129 }
2130 if (err != NULL)
2131 goto done;
2132
2133 if (fsync(fd) == -1) {
2134 err = got_error_from_errno("fsync");
2135 goto done;
2136 }
2137
2138 len = sizeof(ireq) + ireq.refname_len;
2139 wbuf = imsg_create(&iev->ibuf, GOTD_IMSG_NOTIFY, PROC_REPO_WRITE,
2140 repo_write.pid, len);
2141 if (wbuf == NULL) {
2142 err = got_error_from_errno("imsg_create REF");
2143 goto done;
2144 }
2145 if (imsg_add(wbuf, &ireq, sizeof(ireq)) == -1) {
2146 err = got_error_from_errno("imsg_add NOTIFY");
2147 goto done;
2148 }
2149 if (imsg_add(wbuf, refname, ireq.refname_len) == -1) {
2150 err = got_error_from_errno("imsg_add NOTIFY");
2151 goto done;
2152 }
2153
2154 imsg_close(&iev->ibuf, wbuf);
2155 gotd_imsg_event_add(iev);
2156 done:
2157 free(refname);
2158 if (fd != -1 && close(fd) == -1 && err == NULL)
2159 err = got_error_from_errno("close");
2160 return err;
2161 }
2162
2163 static void
2164 repo_write_dispatch_session(int fd, short event, void *arg)
2165 {
2166 const struct got_error *err = NULL;
2167 struct gotd_imsgev *iev = arg;
2168 struct imsgbuf *ibuf = &iev->ibuf;
2169 struct imsg imsg;
2170 struct repo_write_client *client = &repo_write_client;
2171 ssize_t n;
2172 int shut = 0, have_packfile = 0;
2173
2174 if (event & EV_READ) {
2175 if ((n = imsgbuf_read(ibuf)) == -1)
2176 fatal("imsg_read error");
2177 if (n == 0) /* Connection closed. */
2178 shut = 1;
2179 }
2180
2181 if (event & EV_WRITE) {
2182 err = gotd_imsg_flush(ibuf);
2183 if (err)
2184 fatalx("%s", err->msg);
2185 }
2186
2187 for (;;) {
2188 if ((n = imsg_get(ibuf, &imsg)) == -1)
2189 fatal("%s: imsg_get error", __func__);
2190 if (n == 0) /* No more messages. */
2191 break;
2192
2193 if (imsg.hdr.type != GOTD_IMSG_LIST_REFS_INTERNAL &&
2194 !repo_write.refs_listed) {
2195 err = got_error(GOT_ERR_PRIVSEP_MSG);
2196 break;
2197 }
2198
2199 switch (imsg.hdr.type) {
2200 case GOTD_IMSG_LIST_REFS_INTERNAL:
2201 err = list_refs(&imsg);
2202 if (err)
2203 log_warnx("ls-refs: %s", err->msg);
2204 break;
2205 case GOTD_IMSG_REF_UPDATE:
2206 err = recv_ref_update(&imsg);
2207 if (err)
2208 log_warnx("ref-update: %s", err->msg);
2209 break;
2210 case GOTD_IMSG_PACKFILE_PIPE:
2211 err = receive_pack_pipe(&imsg, iev);
2212 if (err) {
2213 log_warnx("receiving pack pipe: %s", err->msg);
2214 break;
2215 }
2216 break;
2217 case GOTD_IMSG_PACKIDX_FILE:
2218 err = receive_pack_idx(&imsg, iev);
2219 if (err) {
2220 log_warnx("receiving pack index: %s",
2221 err->msg);
2222 break;
2223 }
2224 break;
2225 case GOTD_IMSG_RECV_PACKFILE:
2226 err = protect_refs_from_deletion();
2227 if (err)
2228 break;
2229 err = recv_packfile(&have_packfile, &imsg);
2230 if (err) {
2231 log_warnx("receive packfile: %s", err->msg);
2232 break;
2233 }
2234 if (have_packfile) {
2235 err = verify_packfile();
2236 if (err) {
2237 log_warnx("verify packfile: %s",
2238 err->msg);
2239 break;
2240 }
2241 err = install_packfile(iev);
2242 if (err) {
2243 log_warnx("install packfile: %s",
2244 err->msg);
2245 break;
2246 }
2247 /*
2248 * Ensure we re-read the pack index list
2249 * upon next access.
2250 */
2251 repo_write.repo->pack_path_mtime.tv_sec = 0;
2252 repo_write.repo->pack_path_mtime.tv_nsec = 0;
2253 }
2254 err = update_refs(iev);
2255 if (err) {
2256 log_warnx("update refs: %s", err->msg);
2257 }
2258 break;
2259 case GOTD_IMSG_NOTIFY:
2260 err = render_notification(&imsg, iev);
2261 if (err) {
2262 log_warnx("render notification: %s", err->msg);
2263 shut = 1;
2264 }
2265 break;
2266 default:
2267 log_debug("unexpected imsg %d", imsg.hdr.type);
2268 break;
2269 }
2270
2271 imsg_free(&imsg);
2272 }
2273
2274 if (!shut && check_cancelled(NULL) == NULL) {
2275 if (err &&
2276 gotd_imsg_send_error_event(iev, PROC_REPO_WRITE,
2277 client->id, err) == -1) {
2278 log_warnx("could not send error to parent: %s",
2279 err->msg);
2280 }
2281 gotd_imsg_event_add(iev);
2282 } else {
2283 /* This pipe is dead. Remove its event handler */
2284 event_del(&iev->ev);
2285 event_loopexit(NULL);
2286 }
2287 }
2288
2289 static const struct got_error *
2290 recv_connect(struct imsg *imsg)
2291 {
2292 struct gotd_imsgev *iev = &repo_write.session_iev;
2293 size_t datalen;
2294
2295 datalen = imsg->hdr.len - IMSG_HEADER_SIZE;
2296 if (datalen != 0)
2297 return got_error(GOT_ERR_PRIVSEP_LEN);
2298
2299 if (repo_write.session_fd != -1)
2300 return got_error(GOT_ERR_PRIVSEP_MSG);
2301
2302 repo_write.session_fd = imsg_get_fd(imsg);
2303 if (repo_write.session_fd == -1)
2304 return got_error(GOT_ERR_PRIVSEP_NO_FD);
2305
2306 if (imsgbuf_init(&iev->ibuf, repo_write.session_fd) == -1)
2307 return got_error_from_errno("imsgbuf_init");
2308 imsgbuf_allow_fdpass(&iev->ibuf);
2309 iev->handler = repo_write_dispatch_session;
2310 iev->events = EV_READ;
2311 iev->handler_arg = NULL;
2312 event_set(&iev->ev, iev->ibuf.fd, EV_READ,
2313 repo_write_dispatch_session, iev);
2314 gotd_imsg_event_add(iev);
2315
2316 return NULL;
2317 }
2318
2319 static void
2320 repo_write_dispatch(int fd, short event, void *arg)
2321 {
2322 const struct got_error *err = NULL;
2323 struct gotd_imsgev *iev = arg;
2324 struct imsgbuf *ibuf = &iev->ibuf;
2325 struct imsg imsg;
2326 ssize_t n;
2327 int shut = 0;
2328 struct repo_write_client *client = &repo_write_client;
2329
2330 if (event & EV_READ) {
2331 if ((n = imsgbuf_read(ibuf)) == -1)
2332 fatal("imsg_read error");
2333 if (n == 0) { /* Connection closed. */
2334 shut = 1;
2335 goto done;
2336 }
2337 }
2338
2339 if (event & EV_WRITE) {
2340 err = gotd_imsg_flush(ibuf);
2341 if (err)
2342 fatalx("%s", err->msg);
2343 }
2344
2345 while (err == NULL) {
2346 err = check_cancelled(NULL);
2347 if (err)
2348 break;
2349 if ((n = imsg_get(ibuf, &imsg)) == -1)
2350 fatal("%s: imsg_get", __func__);
2351 if (n == 0) /* No more messages. */
2352 break;
2353
2354 switch (imsg.hdr.type) {
2355 case GOTD_IMSG_CONNECT_REPO_CHILD:
2356 err = recv_connect(&imsg);
2357 break;
2358 default:
2359 log_debug("unexpected imsg %d", imsg.hdr.type);
2360 err = got_error(GOT_ERR_PRIVSEP_MSG);
2361 break;
2362 }
2363
2364 imsg_free(&imsg);
2365 }
2366
2367 if (err && gotd_imsg_send_error_event(iev, PROC_REPO_WRITE,
2368 client->id, err) == -1)
2369 log_warnx("could not send error to parent: %s", err->msg);
2370 done:
2371 if (!shut) {
2372 gotd_imsg_event_add(iev);
2373 } else {
2374 /* This pipe is dead. Remove its event handler */
2375 event_del(&iev->ev);
2376 event_loopexit(NULL);
2377 }
2378 }
2379
2380 void
2381 repo_write_main(const char *title, const char *repo_path,
2382 int *pack_fds, int *temp_fds,
2383 FILE *diff_f1, FILE *diff_f2, int diff_fd1, int diff_fd2,
2384 struct got_pathlist_head *protected_tag_namespaces,
2385 struct got_pathlist_head *protected_branch_namespaces,
2386 struct got_pathlist_head *protected_branches)
2387 {
2388 const struct got_error *err = NULL;
2389 struct repo_write_client *client = &repo_write_client;
2390 struct gotd_imsgev iev;
2391
2392 client->fd = -1;
2393 client->pack_pipe = -1;
2394 client->packidx_fd = -1;
2395 client->pack.fd = -1;
2396
2397 repo_write.title = title;
2398 repo_write.pid = getpid();
2399 repo_write.pack_fds = pack_fds;
2400 repo_write.temp_fds = temp_fds;
2401 repo_write.session_fd = -1;
2402 repo_write.session_iev.ibuf.fd = -1;
2403 repo_write.protected_tag_namespaces = protected_tag_namespaces;
2404 repo_write.protected_branch_namespaces = protected_branch_namespaces;
2405 repo_write.protected_branches = protected_branches;
2406 repo_write.diff.f1 = diff_f1;
2407 repo_write.diff.f2 = diff_f2;
2408 repo_write.diff.fd1 = diff_fd1;
2409 repo_write.diff.fd2 = diff_fd2;
2410
2411 STAILQ_INIT(&repo_write_client.ref_updates);
2412
2413 err = got_repo_open(&repo_write.repo, repo_path, NULL, pack_fds);
2414 if (err)
2415 goto done;
2416 if (!got_repo_is_bare(repo_write.repo)) {
2417 err = got_error_msg(GOT_ERR_NOT_GIT_REPO,
2418 "bare git repository required");
2419 goto done;
2420 }
2421 if (got_repo_get_object_format(repo_write.repo) != GOT_HASH_SHA1) {
2422 err = got_error_msg(GOT_ERR_NOT_IMPL,
2423 "sha256 object IDs unsupported in network protocol");
2424 goto done;
2425 }
2426
2427 got_repo_temp_fds_set(repo_write.repo, temp_fds);
2428
2429 signal(SIGINT, catch_sigint);
2430 signal(SIGTERM, catch_sigterm);
2431 signal(SIGPIPE, SIG_IGN);
2432 signal(SIGHUP, SIG_IGN);
2433
2434 if (imsgbuf_init(&iev.ibuf, GOTD_FILENO_MSG_PIPE) == -1) {
2435 err = got_error_from_errno("imsgbuf_init");
2436 goto done;
2437 }
2438 imsgbuf_allow_fdpass(&iev.ibuf);
2439 iev.handler = repo_write_dispatch;
2440 iev.events = EV_READ;
2441 iev.handler_arg = NULL;
2442 event_set(&iev.ev, iev.ibuf.fd, EV_READ, repo_write_dispatch, &iev);
2443 if (gotd_imsg_compose_event(&iev, GOTD_IMSG_REPO_CHILD_READY,
2444 PROC_REPO_WRITE, -1, NULL, 0) == -1) {
2445 err = got_error_from_errno("imsg compose REPO_CHILD_READY");
2446 goto done;
2447 }
2448
2449 event_dispatch();
2450 done:
2451 if (fclose(diff_f1) == EOF && err == NULL)
2452 err = got_error_from_errno("fclose");
2453 if (fclose(diff_f2) == EOF && err == NULL)
2454 err = got_error_from_errno("fclose");
2455 if (close(diff_fd1) == -1 && err == NULL)
2456 err = got_error_from_errno("close");
2457 if (close(diff_fd2) == -1 && err == NULL)
2458 err = got_error_from_errno("close");
2459 if (err)
2460 log_warnx("%s: %s", title, err->msg);
2461 repo_write_shutdown();
2462 }
2463
2464 void
2465 repo_write_shutdown(void)
2466 {
2467 struct repo_write_client *client = &repo_write_client;
2468 struct gotd_ref_update *ref_update;
2469
2470 log_debug("%s: shutting down", repo_write.title);
2471
2472 while (!STAILQ_EMPTY(&client->ref_updates)) {
2473 ref_update = STAILQ_FIRST(&client->ref_updates);
2474 STAILQ_REMOVE_HEAD(&client->ref_updates, entry);
2475 got_ref_close(ref_update->ref);
2476 free(ref_update);
2477 }
2478
2479 got_pack_close(&client->pack);
2480 if (client->fd != -1)
2481 close(client->fd);
2482 if (client->pack_pipe != -1)
2483 close(client->pack_pipe);
2484 if (client->packidx_fd != -1)
2485 close(client->packidx_fd);
2486
2487 if (repo_write.repo)
2488 got_repo_close(repo_write.repo);
2489 got_repo_pack_fds_close(repo_write.pack_fds);
2490 got_repo_temp_fds_close(repo_write.temp_fds);
2491 if (repo_write.session_fd != -1)
2492 close(repo_write.session_fd);
2493 exit(0);
2494 }
portable version of Game of Trees